Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/434c9e94-a5ee-3d4f-a4ca-8a75ff88ed16.roa
File:                     434c9e94-a5ee-3d4f-a4ca-8a75ff88ed16.roa (raw, json)
Hash identifier:          +Eh5xxhQGsop3eSNOl1V+GvxVtCMsPHr8ksMWaVZ4GY=
Subject key identifier:   42:2C:7B:4A:DF:10:F5:2E:0E:63:EF:8F:B3:10:EE:83:59:EA:4A:F0
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584CDB01F6CADBF6433265E8F900
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/434c9e94-a5ee-3d4f-a4ca-8a75ff88ed16.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     4766
IP address blocks:        168.93.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:01:f6:ca:db:f6:43:32:65:e8:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=0a00db84-5261-42d5-ab31-04e4363ae55c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2d:4c:d6:75:9f:90:73:ae:b6:d0:c6:2b:02:
                    44:f8:3b:8d:4d:65:06:76:d4:a3:38:5c:5e:0a:80:
                    09:52:94:1a:7a:a0:f8:07:57:61:f2:13:61:2e:e9:
                    49:8c:e2:49:9c:15:13:07:69:d1:e3:47:c1:91:30:
                    5d:73:98:3e:f7:78:66:98:82:7c:1e:9e:d4:7c:96:
                    be:d6:98:e2:ff:8b:df:67:5c:a1:50:ed:56:7b:e7:
                    b2:d6:ea:02:e0:1e:8e:cb:97:2a:6c:59:cd:3c:f2:
                    84:24:72:b9:d1:28:cc:5e:e9:9c:78:24:74:6f:9d:
                    83:90:a5:0e:ac:b5:3f:f2:14:a5:55:cf:0e:cf:dc:
                    0c:63:12:48:15:1c:7d:3b:71:52:7e:42:22:55:a7:
                    6d:e9:f7:62:3a:2b:4d:d7:92:db:2f:62:7e:d5:e2:
                    90:6b:c8:21:7b:95:00:74:23:af:00:51:9b:45:3c:
                    ba:3f:c2:09:9c:e4:b8:71:29:3d:78:ce:3a:5e:d2:
                    35:2f:0d:bb:13:e9:49:f7:68:d8:58:6d:b3:f7:dd:
                    fe:5c:ca:41:3b:05:24:fe:03:81:f4:6b:d9:27:6c:
                    e4:a3:86:42:32:04:69:fe:8a:bb:b0:6f:16:99:d8:
                    f9:23:6e:7d:cc:75:f7:60:34:60:4d:85:b0:63:7c:
                    00:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:2C:7B:4A:DF:10:F5:2E:0E:63:EF:8F:B3:10:EE:83:59:EA:4A:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/434c9e94-a5ee-3d4f-a4ca-8a75ff88ed16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:1c:f7:b7:7b:60:f4:f9:66:d8:dd:f2:21:78:a9:ee:ea:c8:
         56:38:99:33:e7:67:d0:ca:6a:a3:1c:c7:a9:55:87:30:08:7b:
         f5:8d:6a:ea:56:00:00:1a:22:f3:6b:f9:50:42:10:e3:10:83:
         1d:da:74:8b:09:2f:79:70:1d:17:b5:34:7c:7b:60:f3:ef:ca:
         0c:0a:1a:0e:93:3f:ad:73:7d:4f:2a:21:b5:f7:df:ff:70:42:
         f7:3a:e7:01:33:45:0d:29:d3:49:03:ce:b0:db:af:15:df:c4:
         e2:d1:ab:69:77:62:de:d0:97:a0:dd:c4:ce:29:7b:25:08:ec:
         34:f9:c6:7a:21:92:2a:9f:21:62:88:e7:60:be:c5:72:83:ac:
         a8:20:47:e3:c8:e0:c7:52:6e:f5:f3:13:e0:cb:60:33:3c:86:
         43:f7:cc:aa:40:8c:bb:15:39:47:87:89:d0:3f:74:76:19:16:
         8a:5c:b0:77:50:c7:d2:f7:7a:32:90:0d:eb:83:b7:d8:c8:98:
         7a:2f:09:ee:46:09:a3:58:fc:06:71:37:98:ee:af:cd:5f:bb:
         ac:af:dc:d5:2a:58:f3:92:aa:e4:6b:89:04:07:ce:5e:71:ac:
         c9:83:7e:9a:53:9f:c3:90:ba:70:e1:8d:18:84:a4:ba:fa:16:
         8c:eb:ef:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzbAfbK2/ZDMmXo+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDIxNDAyMDAzMloXDTI2MDUxNTAxMDAzMlowLzEtMCsGA1UEAxMk
MGEwMGRiODQtNTI2MS00MmQ1LWFiMzEtMDRlNDM2M2FlNTVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgi1M1nWfkHOuttDGKwJE+DuNTWUGdtSjOFxe
CoAJUpQaeqD4B1dh8hNhLulJjOJJnBUTB2nR40fBkTBdc5g+93hmmIJ8Hp7UfJa+
1pji/4vfZ1yhUO1We+ey1uoC4B6Oy5cqbFnNPPKEJHK50SjMXumceCR0b52DkKUO
rLU/8hSlVc8Oz9wMYxJIFRx9O3FSfkIiVadt6fdiOitN15LbL2J+1eKQa8ghe5UA
dCOvAFGbRTy6P8IJnOS4cSk9eM46XtI1Lw27E+lJ92jYWG2z993+XMpBOwUk/gOB
9GvZJ2zko4ZCMgRp/oq7sG8Wmdj5I259zHX3YDRgTYWwY3wAEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEIse0rfEPUuDmPvj7MQ7oNZ6krwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDM0YzllOTQtYTVlZS0z
ZDRmLWE0Y2EtOGE3NWZmODhlZDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqF3gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEMc97d7YPT5Ztjd8iF4qe7qyFY4mTPnZ9DKaqMcx6lVhzAIe/WNaupW
AAAaIvNr+VBCEOMQgx3adIsJL3lwHRe1NHx7YPPvygwKGg6TP61zfU8qIbX33/9w
Qvc65wEzRQ0p00kDzrDbrxXfxOLRq2l3Yt7Ql6DdxM4peyUI7DT5xnohkiqfIWKI
52C+xXKDrKggR+PI4MdSbvXzE+DLYDM8hkP3zKpAjLsVOUeHidA/dHYZFopcsHdQ
x9L3ejKQDeuDt9jImHovCe5GCaNY/AZxN5jur81fu6yv3NUqWPOSquRriQQHzl5x
rMmDfppTn8OQunDhjRiEpLr6Fozr75U=
-----END CERTIFICATE-----
Generated at Thu Feb 26 09:27:20 2026 by rpki-client